Return to Makefile CVS log | Up to [local] / src / usr.bin / file |
File: [local] / src / usr.bin / file / Makefile (download)
Revision 1.16, Sun Oct 4 07:25:59 2015 UTC (8 years, 8 months ago) by nicm
Add tame(2) to file(1) and drop the old systrace(4) sandbox. tame(2) is only applied to the child process, which requires the parent to not pass directory file descriptors (tame("cmsg") does not allow it). Because file(1) is already privsep, the permissions in the child can be quickly restricted: first to "stdio cmsg getpw proc" then after the privdrop to "stdio cmsg". |
# $OpenBSD: Makefile,v 1.16 2015/10/04 07:25:59 nicm Exp $ PROG= file SRCS= file.c magic-dump.c magic-load.c magic-test.c magic-common.c \ text.c xmalloc.c MAN= file.1 magic.5 LDADD= -lutil DPADD= ${LIBUTIL} CDIAGFLAGS+= -Wno-long-long -Wall -W -Wnested-externs -Wformat=2 CDIAGFLAGS+= -Wmissing-prototypes -Wstrict-prototypes -Wmissing-declarations CDIAGFLAGS+= -Wwrite-strings -Wshadow -Wpointer-arith -Wsign-compare CDIAGFLAGS+= -Wundef -Wbad-function-cast -Winline -Wcast-align MAGIC= /etc/magic MAGICOWN= root MAGICGRP= bin MAGICMODE= 444 CLEANFILES+= magic post-magic MAG1= $(.CURDIR)/magdir/Header \ $(.CURDIR)/magdir/Localstuff \ $(.CURDIR)/magdir/OpenBSD MAGFILES= $(.CURDIR)/magdir/[0-9a-z]* post-magic: $(MAGFILES) for i in ${.ALLSRC:N*.orig}; do \ echo $$i; \ done|sort|xargs -n 1024 cat >$(.TARGET) magic: $(MAG1) post-magic cat ${MAG1} post-magic >$(.TARGET) afterinstall: ${INSTALL} ${INSTALL_COPY} -o $(MAGICOWN) -g $(MAGICGRP) \ -m $(MAGICMODE) magic $(DESTDIR)$(MAGIC) all: file magic .include <bsd.prog.mk>